$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404.mft File: 2ff061ee-e6cf-447c-8c04-b4a8b1f7e404.mft (raw, json) Hash identifier: yXxQbkTw4f8brtSfyxQ73oSIoMP7cz6/Sjf3mOxb/lM= Subject key identifier: AB:B5:82:78:5E:A5:9A:D2:2B:6F:C6:E8:18:97:3E:48:23:4F:55:8B Authority key identifier: 7C:D0:FD:8A:78:11:6A:24:5F:B5:B7:33:D4:92:60:13:FA:58:F9:48 Certificate issuer: /CN=2ff061ee-e6cf-447c-8c04-b4a8b1f7e404 Certificate serial: 010D0C9F4328584BC03A2BF36C32AA5BFF6CDE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404.mft Manifest number: 010D0C9F432858454B607AA9882D0DD5B7A5EB53 Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: 2ff061ee-e6cf-447c-8c04-b4a8b1f7e404.crl (hash: LlVhyXY2UW9uhiVaeldHsi0A9UxpbxYQRphzcUsbUrk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2b:f3:6c:32:aa:5b:ff:6c:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff061ee-e6cf-447c-8c04-b4a8b1f7e404 Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=639c5c24-8a07-4f21-8e1c-dc16028d4940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:e0:b7:47:87:a2:22:d3:d2:8f:93:f2:64: 3f:91:6e:08:4f:36:e0:85:26:21:07:db:b7:ed:b4: 7c:13:27:c2:b4:cc:f9:d2:cd:d3:f7:13:bf:10:3b: fc:33:3e:49:5d:01:89:a3:6a:fe:50:01:9a:0c:32: 29:c1:94:49:62:5c:66:9d:d7:f4:a7:dc:91:04:eb: 75:a0:e5:d9:0d:fb:e2:55:60:50:4a:2c:91:f8:ad: cd:d7:49:f9:bb:55:79:bf:a9:07:9b:58:52:37:e3: 5b:00:43:23:87:1b:c9:de:bf:af:63:f4:04:d4:25: 71:b3:bb:30:38:fc:6f:ef:7c:a4:9c:bb:f8:d6:5a: 3c:cb:c9:ab:d2:e0:dd:c4:3c:1b:4c:4f:69:93:6a: b0:4e:64:ab:ca:85:f2:67:86:40:c3:58:07:6e:92: 9d:48:9a:0c:d2:bf:b9:f7:2f:1f:db:96:97:25:6c: 10:a2:00:81:f8:1b:53:15:14:c0:b2:65:5f:a9:49: 1d:6d:1b:6d:c0:78:15:af:14:65:49:60:d7:09:39: e5:18:37:86:90:35:e4:21:cc:78:55:38:14:f5:56: 49:7f:43:21:63:04:d1:06:ac:75:99:49:8a:d2:c2: 18:31:ce:4b:21:aa:51:9c:70:d4:69:64:dc:1d:fc: b1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B5:82:78:5E:A5:9A:D2:2B:6F:C6:E8:18:97:3E:48:23:4F:55:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404.crl X509v3 Authority Key Identifier: keyid:7C:D0:FD:8A:78:11:6A:24:5F:B5:B7:33:D4:92:60:13:FA:58:F9:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:e3:14:24:b4:8e:99:21:bd:c9:20:8b:a7:a3:3c:65:6b:05: 2d:01:02:78:3c:3b:48:e9:5d:5d:89:93:8a:29:54:4d:c6:b2: 2a:35:a4:ef:9b:a3:6e:0c:37:cd:99:8f:38:33:92:a6:12:59: e1:b5:8c:bb:66:a0:a1:cd:a7:7e:2d:4f:b6:21:1c:b2:d0:fb: d8:83:f4:5a:51:e7:2a:5f:51:3a:9b:9d:0f:07:18:05:ae:06: 7f:e1:79:56:bc:8a:75:53:76:da:29:d5:6a:bb:67:09:74:79: a9:92:96:67:fd:9f:e7:09:e8:da:bf:7c:8c:03:22:87:33:fd: c3:35:27:fb:3e:62:2c:b8:7c:a3:84:d2:f4:b1:ac:4c:d5:24: f4:68:85:5b:77:d6:39:f5:ca:cb:b7:59:d9:9b:6b:f3:06:53: e1:df:bb:84:59:8c:5d:43:f3:cd:95:7a:97:59:01:45:69:48: d1:2f:2a:84:a9:1d:d8:f7:59:db:cc:ce:9d:43:fe:43:38:08: a1:35:c9:a8:64:cd:47:07:bc:64:9f:7f:ba:1a:54:d6:24:f1: 58:40:2a:07:75:64:56:cc:53:da:c1:41:97:22:2b:ff:f7:38: 40:8e:56:35:ce:ab:20:54:53:bd:36:ce:ac:de:fa:89:6f:44: f0:7c:ea:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOivzbDKqW/9s3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmMDYxZWUtZTZjZi00NDdjLThjMDQtYjRhOGIxZjdl NDA0MB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk NjM5YzVjMjQtOGEwNy00ZjIxLThlMWMtZGMxNjAyOGQ0OTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpHgt0eHoiLT0o+T8mQ/kW4ITzbghSYhB9u3 7bR8EyfCtMz50s3T9xO/EDv8Mz5JXQGJo2r+UAGaDDIpwZRJYlxmndf0p9yRBOt1 oOXZDfviVWBQSiyR+K3N10n5u1V5v6kHm1hSN+NbAEMjhxvJ3r+vY/QE1CVxs7sw OPxv73yknLv41lo8y8mr0uDdxDwbTE9pk2qwTmSryoXyZ4ZAw1gHbpKdSJoM0r+5 9y8f25aXJWwQogCB+BtTFRTAsmVfqUkdbRttwHgVrxRlSWDXCTnlGDeGkDXkIcx4 VTgU9VZJf0MhYwTRBqx1mUmK0sIYMc5LIapRnHDUaWTcHfyxwwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKu1gnhepZrSK2/G6BiXPkgjT1WLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmYw NjFlZS1lNmNmLTQ0N2MtOGMwNC1iNGE4YjFmN2U0MDQvMmZmMDYxZWUtZTZjZi00 NDdjLThjMDQtYjRhOGIxZjdlNDA0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZmMDYxZWUtZTZjZi00NDdjLThj MDQtYjRhOGIxZjdlNDA0LzJmZjA2MWVlLWU2Y2YtNDQ3Yy04YzA0LWI0YThiMWY3 ZTQwNC5jcmwwHwYDVR0jBBgwFoAUfND9ingRaiRftbcz1JJgE/pY+UgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZmYwNjFlZS1lNmNmLTQ0N2MtOGMwNC1iNGE4 YjFmN2U0MDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA34xQktI6ZIb3JIIunozxl awUtAQJ4PDtI6V1diZOKKVRNxrIqNaTvm6NuDDfNmY84M5KmElnhtYy7ZqChzad+ LU+2IRyy0PvYg/RaUecqX1E6m50PBxgFrgZ/4XlWvIp1U3baKdVqu2cJdHmpkpZn /Z/nCejav3yMAyKHM/3DNSf7PmIsuHyjhNL0saxM1ST0aIVbd9Y59crLt1nZm2vz BlPh37uEWYxdQ/PNlXqXWQFFaUjRLyqEqR3Y91nbzM6dQ/5DOAihNcmoZM1HB7xk n3+6GlTWJPFYQCoHdWRWzFPawUGXIiv/9zhAjlY1zqsgVFO9Ns6s3vqJb0TwfOrD -----END CERTIFICATE-----Generated at Wed Nov 5 08:39:14 2025 by rpki-client